// index.js
const http = require('http');
http.createServer((_, res) => res.end('Hello from OCI volume!\n'))
  .listen(process.env.PORT || 80);

FROM scratch
COPY app /

containers:
  - name: runtime
    image: mirror.gcr.io/node:22.15.1

containers:
  - name: runtime
    image: node:22
    imagePullPolicy: Always

#!/usr/bin/env bash
set -euox pipefail

# Tạo file script kind-with-registry.sh với phép enable ImageVolume feature gate
TMP_SCRIPT=$(mktemp)
curl -fsSL https://kind.sigs.k8s.io/examples/kind-with-registry.sh -o "$TMP_SCRIPT"
awk '
  /^apiVersion: kind.x-k8s.io\/v1alpha4/ {
    print
    print "featureGates:\n  ImageVolume: true"
    next
  }
  { print }
' "$TMP_SCRIPT" | bash -s

# Build image code-only
WORK=$(mktemp -d)
mkdir -p "$WORK/app"
cat > "$WORK/app/index.js" <<JS
const http = require('http');
http.createServer((_, res) => res.end('Hello from OCI volume!\n'))
  .listen(process.env.PORT || 80);
JS
cat > "$WORK/Dockerfile" <<DOCKER
FROM scratch
COPY app /
DOCKER

RAND_TAG=$(openssl rand -hex 4)
FULL_IMAGE="localhost:5001/hello-app:${RAND_TAG}"
docker build -f "$WORK/Dockerfile" -t "${FULL_IMAGE}" "$WORK"
docker push "${FULL_IMAGE}"

# Tạo Pod sử dụng Image Volume
cat > "$WORK/node-demo.yaml" <<EOF
apiVersion: v1
kind: Pod
metadata:
  name: node-demo
spec:
  containers:
  - name: runtime
    image: mirror.gcr.io/node:22-slim
    command: ["node", "/usr/src/app/index.js"]
    workingDir: /usr/src/app
    ports:
    - containerPort: 80
    volumeMounts:
    - mountPath: /usr/src/app
      name: app-src
  volumes:
  - name: app-src
    image:
      reference: ${FULL_IMAGE}
      pullPolicy: IfNotPresent
EOF

kubectl apply -f "$WORK/node-demo.yaml"
kubectl wait --for=condition=Ready pod/node-demo --timeout=120s

# Kiểm tra ứng dụng web
kubectl port-forward pod/node-demo 3000:80 >/dev/null &
PF=$!
sleep 2
echo -n "curl → "
curl http://localhost:3000
kill $PF

# Dọn dẹp
kind delete cluster
rm -rf "${WORK}"